It makes no difference as this combo;
root '/path/';
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
open_basedir = '/path/'
doc_root = '/path/'
Next to jailing, this boxes everything in.
With location /.../ '.php' you fine-tune where scripts live which may be
run.
I'd leave cgi.force_redirect commented, ea. not set to anything at all.
Posted at Nginx Forum: http://forum.nginx.org/read.php?2,254701,254716#msg-254716